微软的服务器环境-Microsoft.ppt

* Multiple-Phased Approach Microsoft IT uses a multiple-phased approach for patching client systems. Deployment and enforcement of emergency critical updates at Microsoft consist of the following phases: Notification of Helpdesk: Microsoft IT notifies Helpdesk about the impending deployment of an update so that Helpdesk can be ready to support users. Announcement through Windows Update: Microsoft IT fully supports using Windows Update for patching client systems. When a product development group releases a software update, Microsoft IT uses a Group Policy setting to notify employees that they can voluntarily go to the Windows Update Web site and install the update on their own. Microsoft uses this method because of its educated user base and the fact that the majority of employees enjoy high-speed, reliable network connections and full access to the Internet. This method enables employees to manage any necessary restarts in order to minimize the impact on their work. Announcement through e-mail and the Microsoft IT internal Web site: Within four to six hours of the initial Windows Update publication, Microsoft IT sends e-mail throughout the organization and posts a notification on the Microsoft IT internal Web site that a critical update is available and must be installed by a certain date and time. Typically, in the Microsoft IT SMS?2003 environment, about 70 percent of desktop users voluntarily respond and install critical updates within the first 24 hours after the update is announced. SMS?2003 software distribution forced patch management: Microsoft IT uses the SMS?2003 Advanced Client persistent icon in the Windows desktop notification area. The persistent icon reminds users of an impending update’s enforcement date and time three to fives times a day until the grace period expires. After the grace period expires, Microsoft IT initiates an SMS?2003–based forced deployment of an update. For example, if Microsoft IT first advertised the update on Wednesday